Senior Penetration Testing Engineer - AI/LLM Security

State Street; Kilkenny; Hybrid; EUR 104,000 - 176,000; Full time

Job summary

State Street seeks a Senior Penetration Testing Engineer to join the Penetration Testing Team within Threat Intelligence and Assurance. You will provide hands-on testing across networks and applications, lead third-party testing programs, and deliver regulator-ready findings. Hybrid work is expected depending on location.

You will guide remediation, validate fixes with engineering teams, and ensure secure design and implementation in a highly regulated banking environment.

Qualifications

• 5+ years in penetration testing across high-security environments.
• Experience managing third-party penetration testing vendors, including quality validation and outcome assurance.
• Deep expertise in application penetration testing (web, APIs, mobile) and knowledge of enterprise network attack paths.
• Strong knowledge of modern architectures (cloud-native, microservices, identity platforms, CI/CD pipelines).
• Ability to translate technical findings into actionable, risk-based remediation guidance and influence stakeholders.
• Nice to have: experience using AI/LLM tools for network and application testing and configuration reviews.

Responsibilities

• Design and manage third-party network penetration tests, including scoping, vendor selection, rules of engagement, QA, and validation of results.
• Lead end-to-end application penetration testing across internal and third-party providers (web, API), including scoping, execution, exploitation, and retesting.
• Perform advanced testing across authn/authz, business logic, injection, API abuse, crypto misuse, and access control weaknesses.
• Establish and enforce testing standards for internal teams and external vendors to ensure consistency and regulatory defensibility.
• Deliver regulator-ready reporting with clear exploitability, risk context, and actionable remediation guidance.
• Lead the use of AI/LLM-enabled testing techniques and conduct assurance testing of enterprise AI/LLM deployments.
• Partner with engineering and infrastructure teams to validate remediation, reduce recurrence, and strengthen secure development and deployment practices.

Skills

Penetration testing

Application testing

Network testing

Vendor management

Risk assessment

AI/LLM testing

Education

BS/MS in relevant field

Certifications (OSCP/OSEP/OSWE, GPEN/GXPN, GWAPT, PNPT, GCPN)

Job description

State Street seeks a Senior Penetration Testing Engineer to join the Penetration Testing Team within Threat Intelligence and Assurance. You will provide hands-on testing across networks and applications, lead third-party testing programs, and deliver regulator-ready findings. Hybrid work is expected depending on location.

You will guide remediation, validate fixes with engineering teams, and ensure secure design and implementation in a highly regulated banking environment.